CVE-2005-4139

Multiple SQL injection vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) year parameter in calendar.php, (2) user parameter array in v_profile.php, and (3) the userid parameter in misc.php.

• http://kapda.ir/advisory-149.htmlExploit, Patch, Vendor Advisory
• http://securityreason.com/securityalert/238
• http://www.osvdb.org/21737
• http://www.osvdb.org/21738
• http://www.osvdb.org/21739
• http://www.securityfocus.com/archive/1/418837/100/0/threaded
• http://www.securityfocus.com/bid/15763Exploit, Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23531
• http://kapda.ir/advisory-149.htmlExploit, Patch, Vendor Advisory
• http://securityreason.com/securityalert/238
• http://www.osvdb.org/21737
• http://www.osvdb.org/21738
• http://www.osvdb.org/21739
• http://www.securityfocus.com/archive/1/418837/100/0/threaded
• http://www.securityfocus.com/bid/15763Exploit, Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23531

Published

Dec 9, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-4133Sun Update Connection in Sun Solaris 10, when configured to …
• CVE-2005-4134Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon be…
• CVE-2005-4135Direct static code injection vulnerability in includes/newto…
• CVE-2005-4136Cross-site scripting (XSS) vulnerability in login.php in DRZ…
• CVE-2005-4137SQL injection vulnerability in viewinvoice.php in DRZES HMS …
• CVE-2005-4138Multiple cross-site scripting (XSS) vulnerabilities in ThWbo…
• CVE-2005-4140SQL injection vulnerability in admin/login/index.php in Webs…
• CVE-2005-4141Multiple SQL injection vulnerabilities in ASPMForum allow re…
• CVE-2005-4142The web interface for subscribing new users in Lyris ListMan…
• CVE-2005-4143SQL injection vulnerability in Lyris ListManager 5.0 through…
• CVE-2005-4144Lyris ListManager 5.0 through 8.9a allows remote attackers t…
• CVE-2005-4145The MSDE version of Lyris ListManager 5.0 through 8.9b confi…